SecurityWeek

A hacker accused of offering support to the Islamic State of Iraq and the Levant (ISIL), appeared in court in the U.S. on Wednesday, after being arrested in Malaysia in October 2015.

Intel’s 6th Generation Intel Core™ vPro™ Processors Add Hardware-based Authentication Features

British bank HSBC said it had successfully repelled a cyber attack on Friday although online access to banking services was not possible. "HSBC UK Internet banking was attacked this morning. We successfully defended our systems," HSBC UK tweeted. "We are working hard to restore services, and normal service is now being resumed," it said.

By Understanding the Dark Web, You Can Take a Proactive Approach that Helps Reduce Uncertainty and Improves Overall Cyber Resiliency

A researcher has earned a significant bounty after finding a serious cross-site scripting (XSS) vulnerability that could have allowed malicious hackers to take over users’ Facebook accounts.

US and British intelligence agencies for years hacked into Israeli drones carrying out surveillance to prepare for a potential strike on Iran, Israeli daily Yediot Aharonot reported on Friday.

It took the developers of OpenSSL just over two weeks to patch a high severity vulnerability that allows attackers to obtain information that could be used to decrypt secure traffic.

A new piece of Android ransomware has emerged, capable of locking devices, changing PINs, and even fully wiping user data via factory resets, Symantec researchers warn.

Cisco has released a firmware update for its RV220W Wireless Network Security Firewall product to address a critical vulnerability that allows remote attackers to gain administrative privileges on the device.

The advanced persistent threat (APT) actor behind the recent attacks targeting Ukraine has started delivering BlackEnergy malware using specially crafted Word documents with embedded macros.

Pindrop Security, a startup focused on combating phone-based fraud, announced that it has raised $75 million in a Series C funding round led by Google Capital, bringing the total raised by the company to $122 million.

VirusTotal on Wednesday announced that its malware scanning engine now supports firmware images, characterizing them as legit or malicious.

Oracle on Wednesday announced specific plans to kill the Java browser plugin and has advised users to start migrating to other technologies.

LG today released a security update for some of its latest smartphones to resolve a severe vulnerability found in the Smart Notice application.

An official revealed that Israel’s Electricity Authority was targeted in a cyberattack, but experts said it was just a ransomware infection that has not impacted the country’s power grid.

Samsung has released a maintenance update for its major Android flagship Galaxy models to resolve 16 vulnerabilities in these devices.

If you read my pieces regularly, you might have guessed that approaching security operations and incident response in a strategic, holistic, and analytical way is something I’m passionate about. Perhaps not surprisingly, it’s a topic I often discuss during presentations, discussions, and meetings. Sometimes, I receive feedback or hear statements such as:

cPanel Inc., the company behind the popular web hosting account management tool, informed customers over the weekend that their account information may have been compromised.

IE, Windows UMC Vulnerabilities Fueled Microsoft's 2015 Patch Efforts